I want to make a simple(or not) data access control in Entity Framework. I saw that its not so easily supported in EF, because EF actually doesn't have good support of schemas and views.
I want to make conditional access to some columns of entity.
In Sql Server it's easy to achieve by using schemas. For example I can create a view for user in his schema where some columns are missed. Other user (for example admin) will have all columns in his schema. Both of them can have the same name of the view, for instance: getUsers, but only admin who will execute it from dbo schema(dbo.getUsers) will has all columns, and the others only some. Of course in Sql Server it can be also achieved by stored procedures.
How can I achieve that functionality of data access in EF?
I want to make a function which I will be able to use like this:
-- function checks user role and returns appropirate columns/entity var result = getAppropirateDataForThisUser("getUsers", user);Of course it is only to illustrate the problem. The usage can be completely different.
One thing you can do is to create a wrapper rover DbContext with the logic to filter the columns for relevant user,
public class EfWrapper:Context { private DbContext _dbContext; public EfWrapper(DbContext context){ _dbContext=context; } public IEnumerable <User> getUsers(User user){ //if ... write your logic to choose correct projection var users= from user in context.Users select new UserWithLessColumns { id= user.Id, Name= user.Name }); return users; } }